In https://github.com/OpenIDC/mod_auth_openidc/discussions/1286, the same question got an answer:
this type of complex expressions is only possible when compiled with libjq support, see https://github.com/OpenIDC/mod_auth_openidc/wiki/Authorization#complex-expressions